- Exciting news!Announcing our $4.6M Series Seed. Learn more →
Git dependency
Severity
High
Description
Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.
Suggestion
Publish the git dependency to npm or a private package repository and consume it from there.
Packages with this issue
web3-providers-ws
Module to handle web3 RPC connections over WebSockets.
nivida
published 1.2.2 • web3-eth-accounts
Web3 module to generate Ethereum accounts and sign data and transactions.
nivida
published 1.2.2 • react-native-gesture-handler
Experimental implementation of a new declarative API for gesture handling in react-native
osdnk
published 1.5.6 • msgpackr-extract
Node addon for string extraction for msgpackr
kriszyp
published 1.1.0 • eth-sig-util
A few useful functions for signing ethereum data
danfinlay
published 1.4.2 •